Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/seMPfmiCoSKVk58HSb4mndU6qQg.roa
File: seMPfmiCoSKVk58HSb4mndU6qQg.roa (raw, json)
Hash identifier: N66wS4H3o3gco+wcatclft4bmWlEb1IoPfnPifzWdOg=
Subject key identifier: B1:E3:0F:7E:68:82:A1:22:95:93:9F:07:49:BE:26:9D:D5:3A:A9:08
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 01856E2FD389FA22658479393F8440BFB440
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/seMPfmiCoSKVk58HSb4mndU6qQg.roa
Signing time: Sun 01 Jan 2023 16:35:06 +0000
ROA not before: Sun 01 Jan 2023 16:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39239
IP address blocks: 2a01:b960:230b::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:d3:89:fa:22:65:84:79:39:3f:84:40:bf:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 1 16:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1e30f7e6882a12295939f0749be269dd53aa908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:b1:4e:fc:bb:f4:5f:10:ce:8b:f0:00:18:
3f:f4:1d:e1:e9:5d:19:d8:23:cd:c2:eb:59:54:80:
c7:ba:b4:fe:04:c8:94:ad:dd:a7:8a:d4:22:1a:76:
06:8f:9a:22:d8:c6:53:5d:9d:5a:59:c9:da:10:63:
36:b3:f8:e3:f5:6c:be:9d:90:24:1c:d8:61:5d:8f:
f0:21:4a:da:b1:29:0b:91:25:49:7f:b5:7c:4f:1f:
4f:ed:f9:e2:14:b2:48:4f:d6:7d:13:6f:3b:0f:5d:
f1:a3:52:f8:79:73:c8:3f:c1:5a:58:ba:05:2a:49:
41:92:71:aa:21:63:f2:c7:45:f1:ed:79:65:6f:cf:
83:30:39:b4:a9:c5:50:9d:6a:df:e7:aa:aa:65:95:
c8:27:f2:1b:e1:c1:35:d4:81:69:cf:4a:fa:b9:99:
57:72:59:f6:6f:8e:22:1a:aa:93:e4:1b:1b:f4:9b:
9f:ab:28:8f:51:0c:6c:de:e2:d4:a9:43:97:e6:a9:
52:3f:a6:f4:93:1e:a0:eb:2e:a2:60:58:b8:60:27:
0e:0d:5e:5e:a4:6d:ef:11:7f:59:0b:b7:08:03:43:
43:0b:9f:2f:91:0f:1a:46:cb:c9:f6:09:93:51:a7:
2b:67:01:5a:4c:3a:bf:70:7c:c1:22:91:84:73:e7:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E3:0F:7E:68:82:A1:22:95:93:9F:07:49:BE:26:9D:D5:3A:A9:08
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/seMPfmiCoSKVk58HSb4mndU6qQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b960:230b::/48
Signature Algorithm: sha256WithRSAEncryption
3c:98:e8:1b:81:2c:3a:14:cf:1b:b5:cc:0e:68:77:ab:66:3f:
76:34:48:8a:16:2c:82:9e:ca:f2:37:7e:a0:1c:59:95:55:5b:
c3:fd:03:44:76:d6:ba:5d:81:86:c6:f3:41:e0:9c:1f:69:74:
84:3e:5a:d8:a2:77:3e:72:52:aa:04:75:8a:e3:0c:de:ed:b3:
04:53:dc:be:ee:a1:3c:e9:d3:e6:97:0e:94:ed:d3:e8:eb:4e:
85:7f:df:b5:14:53:a2:81:6b:6f:21:94:44:3f:b7:45:b7:42:
4b:22:d9:04:b3:89:99:f4:3d:38:b3:30:10:e0:af:04:81:47:
7e:3c:b0:8f:88:16:5e:39:f4:10:6a:6c:8c:94:f7:af:cf:7e:
ac:88:72:1e:2d:06:cf:ff:f5:54:69:ca:8c:0f:e1:74:41:26:
98:e5:d4:77:b2:94:51:9e:44:93:62:f9:08:90:86:ea:72:14:
01:ef:eb:46:4c:15:8e:a8:48:78:45:d4:20:90:d0:8f:ec:20:
72:ef:69:bf:77:76:ca:e3:c9:fd:c4:97:55:03:4b:a6:5a:8d:
d6:eb:d7:41:49:b6:05:2d:0d:7f:9b:9e:60:f0:f9:9d:db:12:
e3:14:99:cb:cb:c8:c9:94:8f:9c:33:bb:ae:4c:4c:aa:1c:38:
88:aa:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:42 2025 by rpki-client